We seem to have been receiving a number of HTTP requests similar to the following lately: 168.10.36.63 - - [22/Oct/2001:14:07:59 -0700] "GET /_vti_bin/owssvr.dll?UL=1&ACT=4&BUILD=2614&STRMVER=4&CAPREQ=0 HTTP/1.0" 200 20677 "-" "Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)" 168.10.36.63 - - [22/Oct/2001:14:08:00 -0700] "GET /MSOffice/cltreq.asp?UL=1&ACT=4&BUILD=2614&STRMVER=4&CAPREQ=0 HTTP/1.0" 200 20677 "-" "Mozilla/4.0 (compatible; MSIE 5.5; Windows NT 5.0)" Does anyone know what these requests are looking for? I am assuming that they are harmless requests from IE 5 assuming that it is talking to an IIS or exchange server, but I cannot find anything that mentions what these files actually are. Dave dwardat_private -- ---------------------------------------------------------------------------- This list is provided by the SecurityFocus ARIS analyzer service. For more information on this free incident handling, management and tracking system please see: http://aris.securityfocus.com
This archive was generated by hypermail 2b30 : Mon Oct 22 2001 - 15:34:13 PDT